Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MPlayer RTSP 远程堆溢出漏洞
Vulnerability Description
Mplayer是linux下的一款播放器，它几乎能播放所有的win媒体文件。 Mplayer处理RealMedia RTSP流的代码中存在缓冲区溢出漏洞，攻击者可以利用这个漏洞以运行播放器用户的权限执行任意代码。从服务器获取媒体数据后，Real RTSP代码将它们存储在固定大小的MAX_FIELDS数组中，但没有检查是否接收了过多的数据。因此恶意服务器可以发送多于MAX_FIELDS的数据，溢出该数组。由于数组用指针来响应字符串，因此攻击者无法写入任意代码，这使得攻击比较困难。
CVSS Information
N/A
Vulnerability Type
N/A